<!DOCTYPE html>
<html>
  <body><a href="javascript:hello('{{xss input 'js' 'uri' 'html'}}')"></a>
  </body>
</html>